Draft. This is a starting template. Have it reviewed before launch.
Privacy policy
Last updated: 29 September 2026
This policy covers the Enhanced Training Studio app and this website, run by Adam White from Australia. The short version: your health and training data stays on your phone, and we never receive it.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) for everything described here.
What stays on your phone
Everything you log in the app stays on your phone: compounds, doses, schedules, blood test results, workouts, routes, data read from Health Connect, and your profile. We have no copy and can't see it. The free edition never contacts our servers at all.
What we do receive
| What | Why | How long |
|---|---|---|
| Licence key, a random device ID, device name and app version, when you activate and when the app checks in every few days | To activate your licence and manage your 3 device slots | While your licence exists |
| Order details from our payment server (amount, time, invoice number) | To issue your licence and for tax records | 5 years, as Australian tax law requires |
| Your email, only if you give it at checkout | To send your receipt and help you find your key | Until you ask us to delete it |
| Your IP address, briefly, when you use the website or the app checks in | Security and to stop abuse (rate limits) | Not stored by us; our host keeps standard logs for a short time |
We don't collect health information. We don't use analytics, advertising or tracking cookies, and we don't sell, rent or share personal information.
Who else is involved
- Cloudflare hosts this website and our licence server. Its servers are in many countries, including the United States, so your IP address and the licence details above may be processed overseas.
- LunaNode (Canada) hosts our BTCPay Server, which handles payments. We don't handle cards or bank details.
- A Bitcoin payment is recorded publicly on the blockchain by its nature. We don't link it to anything beyond your order.
We choose providers that protect data with encryption and access controls, and they may only use it to provide their service to us.
Google Drive backups
If you turn them on, backups go to your own Google Drive, optionally encrypted with a password only you know. We can't read them. Google's privacy policy applies to your Google account.
Health Connect and maps
The app reads the Health Connect data types you choose, only to show them to you on your phone. It doesn't write to Health Connect, and the data isn't sent anywhere. When you view a route, map tiles are loaded from OpenStreetMap, which sees the map area requested.
Security and breaches
Licence data is stored with Cloudflare, protected by access controls, and our admin tools need two separate logins. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC).
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We'll reply within 30 days. Deleting your licence record means it can no longer be activated.
If you're not happy with how we handled a privacy matter, tell us first. You can also complain to the OAIC at oaic.gov.au.
Age
The app and this website are for people aged 18 or over.
Changes
If this policy changes, we'll update the date above and note the change in the changelog.